Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          Hd2zKAUspujtNEzjLgd213CV1rwtVLiTb+6PJkSFOtk=
Subject key identifier:   EF:AE:1E:CF:D6:BD:64:F5:56:ED:DE:09:5F:D4:F1:ED:B5:E2:67:79
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       014A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          0149
Signing time:             Thu 21 Nov 2024 02:33:06 +0000
Manifest this update:     Thu 21 Nov 2024 02:33:06 +0000
Manifest next update:     Sat 23 Nov 2024 02:33:06 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: 6soQWJPr3wH1FtLHJL+lLLq8qdn5WgHO9Q9xbByXoAA=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Nov 21 02:33:06 2024 GMT
            Not After : Nov 23 02:33:06 2024 GMT
        Subject: CN=673e9be2-f271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:2e:ff:74:85:7c:f7:53:d3:b5:ea:ac:a9:
                    de:14:12:db:ca:f0:53:a8:29:61:df:db:c8:be:a6:
                    14:39:b2:e2:54:50:7e:59:a2:cc:9a:ae:b0:80:60:
                    2a:03:f2:de:98:fc:c2:62:f1:fa:52:b2:38:df:e7:
                    5c:4d:06:41:2a:02:75:9a:80:a8:09:9f:67:3c:bc:
                    eb:4f:24:41:32:7b:11:4c:3c:b4:3b:1d:05:10:79:
                    8d:55:e5:ba:7e:b3:34:7c:56:4d:26:15:35:19:5e:
                    8a:df:e2:a6:af:63:28:3d:94:38:5f:c9:94:c0:40:
                    ee:7a:f6:5c:7a:bb:43:31:e7:2a:c2:cb:25:30:47:
                    84:f2:f3:25:40:20:dd:6f:fd:c9:fd:60:2b:0c:13:
                    2b:85:14:86:da:ad:7b:6d:7e:93:db:58:b8:e1:ed:
                    61:fe:32:dc:df:07:30:14:92:98:19:9e:6b:7e:98:
                    38:12:cf:ef:75:f8:98:2e:8b:39:09:e9:95:62:72:
                    4c:34:92:d4:46:03:3d:d6:18:4a:06:1c:fc:0d:0a:
                    82:ad:df:d7:e8:f0:d1:1b:b8:02:0d:c2:e3:54:cf:
                    56:56:26:6d:24:5f:d0:d3:60:b3:7a:3e:fb:c5:a4:
                    fb:68:f4:a7:22:ac:0c:11:5c:cd:71:9d:04:7e:50:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:1E:CF:D6:BD:64:F5:56:ED:DE:09:5F:D4:F1:ED:B5:E2:67:79
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9d:eb:9d:4b:e0:78:06:23:11:81:b4:21:06:d5:f0:0b:46:
         5c:0e:82:2d:57:be:41:ed:3a:7c:e5:26:aa:2d:17:5b:5c:a7:
         0e:9a:60:18:0f:89:01:57:db:e6:7a:14:1a:07:e7:fb:31:67:
         53:d4:c3:d2:7a:85:95:d9:f3:10:f3:17:e0:12:76:76:ef:e5:
         52:3d:80:0a:3d:fd:d6:79:56:7a:42:a5:b3:76:f0:78:43:3f:
         51:6b:45:dc:84:ac:44:91:ee:e6:87:26:fa:eb:7c:4f:45:89:
         34:5e:a1:a2:70:c0:15:0f:7a:7a:33:1a:79:f9:1a:d4:82:de:
         2c:eb:eb:40:11:45:6f:60:0e:19:f6:12:0b:e6:5a:3a:78:fd:
         b8:41:6e:4f:07:6a:81:2e:62:23:d4:5c:7c:3c:f1:9b:2f:0e:
         c3:99:a0:98:11:82:c2:00:4c:af:0d:47:e8:fa:fc:93:26:41:
         e4:46:81:f5:87:5d:65:19:ee:11:20:7a:b5:d3:a3:74:48:97:
         85:fe:29:90:25:d8:fa:5f:27:db:77:3b:6a:44:c0:7d:de:9e:
         48:42:fd:15:c1:9b:9f:1e:39:5e:87:69:c8:09:d1:e8:b5:90:
         a5:03:b4:7e:7c:e5:79:50:c3:ea:65:7f:d1:25:1c:43:3b:ac:
         28:3a:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:36:57 2024 by rpki-client on console-ams.rpki-client.org